CVE-2026-104890 | Kunstmaan Media Bundle up to 7.3.1 File FileHandler.php FileHandler::getFilePath unrestricted upload

October 5, 2026 Yanac

A vulnerability described as critical has been identified in Kunstmaan Media Bundle up to 7.3.1. The affected element is the function FileHandler::getFilePath of the file src/Kunstmaan/MediaBundle/Helper/File/FileHandler.php of the component File Handler. The manipulation results in unrestricted upload.

This vulnerability was named CVE-2026-104890. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More